Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qz3Mzs6peFT1UctJmEFl8ulqIxQ.roa
File: qz3Mzs6peFT1UctJmEFl8ulqIxQ.roa (raw, json)
Hash identifier: E+RDspJ5/0WheHxoD6IfQrNnrp2Ro/cguW7qhNU1vEg=
Subject key identifier: AB:3D:CC:CE:CE:A9:78:54:F5:51:CB:49:98:41:65:F2:E9:6A:23:14
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A54EC91C624E3E689D213F94CB0E3EFD7
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qz3Mzs6peFT1UctJmEFl8ulqIxQ.roa
Signing time: Sat 02 Sep 2023 08:05:04 +0000
ROA not before: Sat 02 Sep 2023 08:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:54eb:bdf9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:54:ec:91:c6:24:e3:e6:89:d2:13:f9:4c:b0:e3:ef:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 08:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab3dcccecea97854f551cb49984165f2e96a2314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:34:51:44:4a:9c:d3:30:d0:c2:81:d4:f1:
fb:d5:9e:cf:48:e2:1f:75:3a:3a:fd:b0:ea:c0:98:
f4:b1:70:d3:66:e0:bd:a6:5b:5b:11:76:6d:fb:9d:
24:75:5f:29:61:91:fa:3d:2a:12:c1:a3:e6:61:fd:
9e:f1:83:81:1b:b7:94:bc:8f:17:ee:45:e6:77:76:
9c:43:ae:bf:3f:d4:84:6f:17:4f:ad:ec:f3:6d:d7:
51:a4:f9:ad:c0:6a:dd:85:6d:09:cc:e3:cb:f7:11:
11:3b:a9:8f:30:72:9a:ed:de:47:92:d5:0a:09:f5:
e7:4b:94:5b:52:03:0e:d9:36:88:0c:46:6a:25:59:
63:3d:42:6c:25:aa:6d:0b:0b:4f:ec:10:47:bb:8a:
e3:d5:aa:17:ee:76:44:28:b4:2e:44:09:37:ce:6e:
9d:d8:34:b7:de:14:d3:22:79:e9:49:f7:95:55:ad:
54:90:5a:a9:85:76:6e:59:d1:84:18:07:74:d8:e1:
65:49:43:57:0b:9e:5d:a9:d5:75:5d:21:4e:c5:e3:
1e:40:cc:87:bf:06:84:e9:97:e9:dd:c1:09:65:00:
cf:37:8b:db:8f:fa:c3:90:57:e9:3a:02:d1:22:7b:
16:85:ce:c8:46:b1:0a:3c:24:73:38:60:2b:cf:b0:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3D:CC:CE:CE:A9:78:54:F5:51:CB:49:98:41:65:F2:E9:6A:23:14
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qz3Mzs6peFT1UctJmEFl8ulqIxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:e4:a9:e8:af:69:dd:1e:7f:8a:da:f6:88:b1:25:ac:a1:20:
46:66:f1:b2:5e:51:df:b9:cf:55:12:6c:04:3b:7b:72:2d:05:
6d:cf:27:4f:e1:65:56:4e:92:37:bf:05:46:3b:91:be:0b:7c:
2f:63:54:11:b5:c9:7d:fc:89:66:32:92:7c:cf:03:f8:90:9a:
75:26:9e:aa:aa:21:f0:ce:03:e7:10:75:53:d5:57:8f:e9:26:
4e:43:4c:cf:39:e2:c5:32:33:c1:e2:02:91:8d:c1:09:80:11:
9d:cb:70:50:55:47:15:13:82:ad:0f:49:cd:a5:22:b4:cc:ac:
92:01:84:a4:61:a0:2d:bc:99:bf:13:e2:98:61:33:7c:32:6c:
eb:c4:9e:8b:8d:1c:cb:5a:10:6c:bb:0d:cd:d5:c8:11:b6:0c:
36:0e:1e:57:52:3f:f3:72:16:23:c4:8a:ac:d5:10:f1:1b:4a:
e6:f2:34:e6:ba:9b:dc:45:4d:d2:6d:3a:2c:a3:39:ee:01:10:
a8:cc:71:25:4e:d0:fd:31:6d:f9:32:d7:eb:ab:83:45:9e:d4:
ee:33:10:b0:43:0f:81:e3:b4:98:62:5b:86:7a:4b:58:8a:9e:
bc:a9:f7:f6:a0:d7:c7:a7:50:1d:fc:5e:bf:ed:06:28:5e:ed:
aa:52:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:10 2025 by rpki-client